Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft
File: qCYCgPNU92LV7fNMisgW4cIHG1k.mft (raw, json)
Hash identifier: 3eH52yzt55VGqFpig1XGT4FrufyEvT0B6/tHdG1/WBg=
Subject key identifier: 45:D4:E2:50:13:FC:FA:E5:A5:FD:5E:29:A4:E0:36:8C:CB:8E:93:30
Authority key identifier: A8:26:02:80:F3:54:F7:62:D5:ED:F3:4C:8A:C8:16:E1:C2:07:1B:59
Certificate issuer: /CN=a8260280f354f762d5edf34c8ac816e1c2071b59
Certificate serial: 0194BABB2DD3D59F3C54F3C9A058D5C3DEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCYCgPNU92LV7fNMisgW4cIHG1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 05:00:16 +0000
Manifest this update: Fri 31 Jan 2025 05:00:16 +0000
Manifest next update: Sat 01 Feb 2025 05:00:16 +0000
Files and hashes: 1: qCYCgPNU92LV7fNMisgW4cIHG1k.crl (hash: QZu/rO4WcwrwTGh5lN9b9STmGZnmqOKVXNcH5+KbCNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCYCgPNU92LV7fNMisgW4cIHG1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:2d:d3:d5:9f:3c:54:f3:c9:a0:58:d5:c3:de:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8260280f354f762d5edf34c8ac816e1c2071b59
Validity
Not Before: Jan 31 05:00:16 2025 GMT
Not After : Feb 1 05:00:16 2025 GMT
Subject: CN=45d4e25013fcfae5a5fd5e29a4e0368ccb8e9330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:59:65:a1:74:c8:45:9d:4c:59:f0:06:3c:
e1:2f:71:ce:c1:86:22:b6:3b:ae:4b:3b:b4:4e:73:
48:a1:48:7b:96:bf:b2:a5:9a:45:ae:cd:a1:5b:2e:
3d:bf:a0:79:09:91:a4:d8:88:d7:d1:f3:4c:1f:7d:
de:75:15:04:77:4a:fd:1e:71:3b:c7:e6:1d:cf:4f:
17:1d:ff:6e:25:1d:a5:c6:75:8b:26:22:20:03:da:
10:28:5c:a6:b1:9b:31:60:f7:c6:6c:95:78:ca:7a:
72:d0:72:f7:b3:de:af:e8:6f:1e:24:02:f2:f1:cf:
a0:27:a3:08:b8:62:c9:21:d5:a9:a4:ee:78:f7:79:
92:04:04:d8:83:35:8d:ab:c1:94:1f:3e:89:76:78:
ab:ff:b9:1e:b3:45:a5:04:7a:88:4e:36:c3:8e:33:
98:dd:c5:89:1f:9f:f3:e0:d2:60:02:d5:9f:79:a1:
d6:d6:99:f8:b1:ea:15:5d:cd:e0:df:11:ac:46:57:
c9:af:eb:6d:04:d4:21:16:35:64:3c:d0:ce:37:ff:
be:f0:c7:52:4e:d4:b5:d7:c7:db:90:79:7c:0c:f2:
73:14:a6:3a:55:95:38:fe:b8:8a:b0:d8:9f:57:e0:
ea:a2:d2:08:a1:8b:e5:9e:c7:b0:c0:e9:24:24:ec:
08:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D4:E2:50:13:FC:FA:E5:A5:FD:5E:29:A4:E0:36:8C:CB:8E:93:30
X509v3 Authority Key Identifier:
keyid:A8:26:02:80:F3:54:F7:62:D5:ED:F3:4C:8A:C8:16:E1:C2:07:1B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCYCgPNU92LV7fNMisgW4cIHG1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:58:95:f0:36:bb:b0:01:0c:a1:6a:96:a0:a5:5b:a8:30:5d:
ec:ae:8c:f4:a0:72:01:30:8b:6d:35:08:04:93:e6:f9:b7:64:
06:40:d1:64:82:10:79:22:72:66:0a:5a:2d:94:09:af:0d:44:
13:d9:c6:7c:8a:58:0b:bf:80:bc:6c:71:e9:ad:61:86:69:17:
84:29:e2:50:3f:92:90:4d:20:d7:d3:4c:91:f7:ea:3c:79:d5:
51:b9:bc:df:df:a6:c9:f4:f2:5f:72:80:86:38:66:1d:fe:65:
58:fb:6e:de:5d:ab:28:6e:5a:2b:08:77:ed:9e:80:9e:36:7a:
da:f8:39:e1:ec:d3:02:88:2b:5e:e0:ba:7d:e3:c0:9c:85:bb:
9f:41:40:47:fb:ca:05:7c:8c:13:89:c7:0a:9e:a2:26:e2:fd:
0a:3f:c6:b4:f0:db:47:7d:cc:dc:1d:e4:b3:cb:49:43:3d:6b:
ad:cb:e3:9b:d6:f4:87:c8:f3:38:b5:76:f9:1a:3d:17:36:fa:
de:59:75:6b:25:72:52:68:b7:0e:ce:e1:7c:f1:9c:bc:5a:eb:
3e:29:a4:4f:ba:15:14:1e:cb:bf:75:e4:29:73:58:ad:db:2d:
20:cb:be:bc:e1:a1:d6:6c:82:25:6e:6c:f2:19:43:98:54:b1:
a2:ab:ed:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:37 2025 by rpki-client on console-fra.rpki-client.org